ciro
-
Posts
1 -
Joined
-
Last visited
This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.
Windows Installer problem. Malware detected
in Resolved Malware Removal Logs
Posted
I have a Laptop Dell XSP M140 running on XP. For few month have problems intalling programs. What I did was to install them in a folder diferent than PROGRAMS, I created a folder called OTHER PROGRAMS. This worked for some program but eventually did not work at all. So I started insyalling programs in SAFE MODE. I thought the problems were related to the NET framework since I got recently couple of errors regarding this. I uninstall the NET framework 1.1, kepth NET Framework 2.0 SP1. Tried to install NET Framework 1.1 again without success. I have not been able to install FRAMEWORK 3.5 update for weeks either, but I learned that some dll were missing from Windows32 (e.g. scrun, jscript.dll, vbscript, dixpex.dll ampmg others). I ran -Windows Script 56- couldn't install them [iNF Install failure, Reason:Access is denied]. I ran NETFXSETUPVERIFIER and found
[10/26/09,19:44:18] ****ERROR****
File C:\WINDOWS\system32\mscoree.dll is not installed on the system
File C:\WINDOWS\system32\netfxperf.dll is not installed on the system
File C:\WINDOWS\system32\mscorier.dll is not installed on the system
File C:\WINDOWS\system32\mscories.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\regsvcs.exe.config is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\installutil.exe.config is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.cfg is not installed on the system
File C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll is not installed on the system
Downloaded from dll-com, could not install them. Then I tried to install -Windows Installer Cleanup Utility-, but failed to install [Cant find script engine VBSscript] .......What might be happening. I think I got attacked with malware, I ran Malwarebytes and got this:
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0c9a45d1-6df3-4615-9353-07fb5ee9b507} (Adware.ActiveSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsDriver (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_WindowsDRIVER (Trojan.Downloader) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0c9a45d1-6df3-4615-9353-07fb5ee9b507} (Adware.ActiveSearch) -> Quarantined and deleted successfully.
Files Infected:
C:\RECYCLER\ADAPT_Installer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
...
Windows installer does not appear under msc "Services", but is on Group Policy/Computer configuration/Administartive templates/Windows Components. I Enable to disable it in order to install Windows Installer. I did not try to uninstall Windows Installer. WHAT SHOULD I DO?